Apparatus method, and storage medium for fault cause extraction utilizing performance values

Abstract

Performance information which is a possible generation cause of a fault is extracted accurately. A fault cause extraction apparatus 10 includes a storage unit 12 and a correlation-destruction-propagation detecting unit 25 . Here, the storage unit 12 stores a correlation model including one or more correlation functions, each of which is generated based on a time series of performance information including a plurality of types of performance values in a system and transforms a performance value for one of the types being an input to a performance value for another one of the types being an output. The correlation-destruction-propagation detecting unit 25 calculates a degree of influence of a performance value for a base point that is one of the types upon the system, based on the number of base point propagation functions, the base point propagation functions being the correlation functions used to transform a performance value for the base point to a performance value for one of other the types being transformable from the base point directly or indirectly and not being input of the correlation function.

What is claimed is: 
     
       1. A fault cause extraction apparatus comprising:
 a storage unit which stores a correlation model including one or more correlation functions, each of which is generated based on a time series of performance information including a plurality of types of performance values in a system and transforms a performance value for one of said types comprising an input to a performance value for another one of said types comprising an output; and 
 a correlation-destruction-propagation detecting unit which calculates a degree of influence upon said system of a performance value for a base point that comprises said one of said types, based on a number of base point propagation functions, 
 wherein said number of base point propagation functions equals a number of said correlation functions used to transform a performance value for said base point to a performance value for said other one of said types. 
 
     
     
       2. The fault cause extraction apparatus according to  claim 1 , further comprising a correlation analysis unit which applies inputted performance information into said correlation model and detects if there is a correlation destruction for each of said correlation function(s) included in said correlation model,
 wherein said correlation-destruction-propagation detecting unit calculates said degree of influence based on the number of said base point propagation functions for which said correlation destruction is detected. 
 
     
     
       3. The fault cause extraction apparatus according to  claim 2 , wherein said correlation-destruction-propagation detecting unit multiplies a destruction degree representing a degree of said correlation destruction by a damping rate for each of said base point propagation functions for which said correlation destruction is detected, said damping rate decreasing in accordance with an order in which said base point propagation function is applied in a process of transformation from a performance value for said base point to a performance value for said type which comprises an output of said base point propagation function, and calculates said degree of influence by summing up said destruction degrees each multiplied by said damping rate. 
     
     
       4. The fault cause extraction apparatus according to  claim 3 , further comprising an abnormality calculation unit which calculates a degree of abnormality of said base point, by dividing said degree of influence calculated for said base point by a sum of said damping rates calculated for said respective base point propagation functions. 
     
     
       5. The fault cause extraction apparatus according to  claim 4 , further comprising a fault analysis unit which compares said degree of abnormality with a threshold. 
     
     
       6. The fault cause extraction apparatus according to  claim 5 , wherein said fault analysis unit determines that an abnormality has occurred when said degree of abnormality comprises one of greater than and equal to said threshold. 
     
     
       7. The fault cause extraction apparatus according to  claim 1 , wherein said correlation-destruction-propagation detecting unit calculates a damping rate for each of said base point propagation functions, said damping rate decreasing in accordance with an order in which said base point propagation function is applied in a process of transformation from a performance value for said base point to a performance value for said type which is an output of said base point propagation function, and calculates said degree of influence by summing up said damping rates. 
     
     
       8. The fault cause extraction apparatus according to  claim 1 , wherein said other one of said types is transformable from said base point directly or indirectly. 
     
     
       9. The fault cause extraction apparatus according to  claim 1 , further comprising a correlation analysis unit which applies inputted performance information into said correlation model and detects if there is a correlation destruction for each of said correlation function(s) included in said correlation model. 
     
     
       10. A fault cause extraction method comprising:
 storing a correlation model including one or more correlation functions, each of which is generated based on a time series of performance information including a plurality of types of performance values in a system and transforms a performance value for one of said types comprising an input to a performance value for another one of said types comprising an output; and 
 calculating a degree of influence upon said system of a performance value for a base point that comprises said one of said types, based on a number of base point propagation functions, 
 wherein said number of base point propagation functions equals a number of said correlation functions used to transform a performance value for said base point to a performance value for said other one of said types. 
 
     
     
       11. The fault cause extraction method according to  claim 10 , further comprising applying inputted performance information into said correlation model and detecting if there is a correlation destruction for each of said correlation function(s) included in said correlation model,
 wherein said calculating a degree of influence calculates said degree of influence based on the number of said base point propagation functions for which said correlation destruction is detected. 
 
     
     
       12. The fault cause extraction method according to  claim 11 , wherein said calculating a degree of influence multiplies a destruction degree representing a degree of said correlation destruction by a damping rate for each of said base point propagation functions for which said correlation destruction is detected, said damping rate decreasing in accordance with an order in which said base point propagation function is applied in a process of transformation from a performance value for said base point to a performance value for said type which is an output of said base point propagation function, and calculates said degree of influence by summing up said destruction degrees each multiplied by said damping rate. 
     
     
       13. The fault cause extraction method according to  claim 12 , further comprising calculating a degree of abnormality of said base point, by dividing said degree of influence calculated for said base point by a sum of said damping rates calculated for said respective base point propagation functions. 
     
     
       14. The fault cause extraction method according to  claim 10 , wherein said calculating a degree of influence calculates a damping rate for each of said base point propagation functions, said damping rate decreasing in accordance with an order in which said base point propagation function is applied in a process of transformation from a performance value for said base point to a performance value for said type which is an output of said base point propagation function, and calculates said degree of influence by summing up said damping rates. 
     
     
       15. A non-transitory computer readable storage medium recording thereon a program, causing a computer to perform a method, said method comprising:
 storing a correlation model including one or more correlation functions, each of which is generated based on a time series of performance information including a plurality of types of performance values in a system and transforms a performance value for one of said types being an input to a performance value for another one of said types being an output; and 
 calculating a degree of influence upon said system of a performance value for a base point that comprises said one of said types, based on a number of base point propagation functions, 
 wherein said number of base point propagation functions equals a number of said correlation functions used to transform a performance value for said base point to a performance value for said other one of said types. 
 
     
     
       16. The non-transitory computer readable storage medium according to  claim 15 , recording thereon said program, said method further comprising applying inputted performance information into said correlation model and detecting if there is a correlation destruction for each of said correlation function(s) included in said correlation model,
 wherein said calculating a degree of influence calculates said degree of influence based on the number of said base point propagation functions for which said correlation destruction is detected. 
 
     
     
       17. The non-transitory computer readable storage medium according to  claim 16 , recording thereon said program, wherein said calculating a degree of influence multiplies a destruction degree representing a degree of said correlation destruction by a damping rate for each of said base point propagation functions for which said correlation destruction is detected, said damping rate decreasing in accordance with an order in which said base point propagation function is applied in a process of transformation from a performance value for said base point to a performance value for said type which is an output of said base point propagation function, and calculates said degree of influence by summing up said destruction degrees each multiplied by said damping rate. 
     
     
       18. The non-transitory computer readable storage medium according to  claim 17 , recording thereon said program, said method further comprising calculating a degree of abnormality of said base point, by dividing said degree of influence calculated for said base point by a sum of said damping rates calculated for said respective base point propagation functions. 
     
     
       19. The non-transitory computer readable storage medium according to  claim 15 , recording thereon said program, wherein said calculating a degree of influence calculates a damping rate for each of said base point propagation functions, said damping rate decreasing in accordance with an order in which said base point propagation function is applied in a process of transformation from a performance value for said base point to a performance value for said type which is an output of said base point propagation function, and calculates said degree of influence by summing up said damping rates. 
     
     
       20. A fault cause extraction apparatus comprising:
 storage means for storing a correlation model including one or more correlation functions, each of which is generated based on a time series of performance information including a plurality of types of performance values in a system and transforms a performance value for one of said types being an input to a performance value for another one of said types being an output; and 
 correlation-destruction-propagation detecting means for calculating a degree of influence upon said system of a performance value for a base point that comprises said one of said types, based on a number of base point propagation functions, 
 wherein said number of base point propagation functions equals a number said correlation functions used to transform a performance value for said base point to a performance value for said other one of said types, and 
 wherein said other one of said types is transformable from said base point directly or indirectly and comprises other than said input.